[kinqsradio]

Summary

Adds the caller for the shared contributor-agreement check (orbyn-dev/.github, cla.yml). It sets a CLA commit status on pull requests: a person agrees once with /orbynAgree and that covers every Orbyn repository. Nothing changes for merging until CLA is required on the default branch and the org secret CLA_SIGNATURES_TOKEN exists; the existing licence-grant check stays in force until then.

Not in this PR

• Requiring the CLA status (done by hand in branch protection).
• The org secret CLA_SIGNATURES_TOKEN.

Parity rows

none

Testing

• CI covers the rest. The reusable workflow has its own tests in orbyn-dev/.github (24 passing). Not yet run against a real pull request.

Risk: outside pull requests show a CLA status; without the secret it reports an error. Undo: revert the merge commit.

Co-authors

none

AI usage

• Written by hand, with no AI
• Harness and version: Claude Code 2.1.318
• Models: claude-opus-5-5 (lead and review), claude-sonnet-5-5 (implementation)
• Effort: medium
• Human role: Anh set the scope and the design (one /orbynAgree for every repository).
• Sources: none

Checklist

• Works on Windows and macOS
• web/src/generated with any contract change; docs/architecture.md with any rule change
• No copied source, secrets, credentials or personal data; no AI attribution in commits, title or branch